CVE-2026-125444: WordPress King Addons for Elementor plugin <= 51.1.87 - Broken Access Control vulnerability

Q: Which installations are affected?

King Addons for Elementor versions through 51.1.87 are affected. The available data does not identify a lower affected version boundary.

Q: Does exploitation require an authenticated WordPress account or user interaction?

No. The vector indicates network-based exploitation with no privileges and no user interaction required.

Q: What is the expected impact of successful exploitation?

The reported impact is limited to low confidentiality impact, with no stated integrity or availability impact.

Published Nov 11, 2026

Updated

Missing Authorization vulnerability in King Addons King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects King Addons for Elementor: from n/a through 51.1.87.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade King Addons for Elementor to a version that resolves this vulnerability.
Fixed in 51.1.90

Event History

Nov 11, 2026

CVE Published

via MITRE·11:35 AM

Data Sourced

via MITRE·11:35 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·12:19 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

King Addons for Elementor versions through 51.1.87 are affected. The available data does not identify a lower affected version boundary.

Does exploitation require an authenticated WordPress account or user interaction?

No. The vector indicates network-based exploitation with no privileges and no user interaction required.

What is the expected impact of successful exploitation?

The reported impact is limited to low confidentiality impact, with no stated integrity or availability impact.

CVE-2026-125444: WordPress King Addons for Elementor plugin <= 51.1.87 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

Does exploitation require an authenticated WordPress account or user interaction?

What is the expected impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

Does exploitation require an authenticated WordPress account or user interaction?

What is the expected impact of successful exploitation?